{"uuid": "a442da01-0388-4f17-a7f3-da5df3c29a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6670", "type": "published-proof-of-concept", "source": "https://t.me/BlackHat0Hackers/3396", "content": "Exploiting Pre-Auth SQL Injection In WhatsUp Gold\nCVE-2024-6670\n\nI discovered an unauthenticated SQL injection against the latest version of progress whatsup gold and turned it into a authentication bypass, after that the product by design allows you to achieve RCE (that part is up to you), lets talk about how this was possible\n\nPOC: https://github.com/sinsinology/CVE-2024-6670", "creation_timestamp": "2024-09-17T13:29:26.000000Z"}